Closed
Bug 571365
Opened 15 years ago
Closed 15 years ago
Upgrade MediaWiki to 1.15.4 to Address Security Issues (XSS, CSRF)
Categories
(Websites :: Other, defect)
Websites
Other
Tracking
(Not tracked)
RESOLVED
DUPLICATE
of bug 571351
People
(Reporter: mcoates, Unassigned)
References
()
Details
(Whiteboard: [infrasec:vuln])
intranet.mozilla.org is currently using MediaWiki version 1.15.3. MediaWiki has recently released version 1.15.4 to address several security issues including a cross site scripting vulnerability and CSRF flaw. We'll need to upgrade MediaWiki as soon as possible since these security flaws are publicly known.
http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
|
Reporter | |
Comment 1•15 years ago
|
||
wiki-europe.mozilla.org also uses mediawiki but the URL resolves to the same public ip address as intranet.mozilla.org. Let me know if these are not using the same back-end mediawiki and I'll file a seperate bug.
|
||
Updated•15 years ago
|
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
|
||
Updated•13 years ago
|
Group: websites-security
You need to log in
before you can comment on or make changes to this bug.
Description
•